Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: a7PImaW79RXszXs+RZ4QUj6FU0A+KzV/FgN0Y9XGung=
Subject key identifier: 29:F2:61:E0:08:CE:4A:58:49:51:91:C8:AC:63:3E:2A:E2:43:B0:1E
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019A71EE66480BA3DA773D562DA0AFE743EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: pjQeWzIPVqMziX/mqbvninXPk/6DOi0jwTsqd4E9b/w=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:66:48:0b:a3:da:77:3d:56:2d:a0:af:e7:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=29f261e008ce4a58495191c8ac633e2ae243b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:3a:89:7f:62:27:aa:a1:8c:9e:55:10:33:
0b:41:f2:27:1a:d3:5f:06:7a:ea:bb:2d:a8:66:11:
b8:ea:a2:49:f2:53:36:5e:1d:3d:aa:72:84:c0:b3:
11:08:aa:0f:46:45:42:db:45:dd:5d:5d:04:33:bb:
4d:e6:88:d9:06:b1:e6:8e:f5:d8:8f:fa:1d:21:62:
41:97:ff:f1:e4:a6:f1:af:8a:9a:a2:43:3d:9b:f9:
0e:dd:e7:5a:f0:a6:36:44:1f:75:36:c4:05:b5:bb:
65:97:9f:70:94:7c:1f:b2:78:ef:b8:98:3d:e7:de:
33:75:47:df:be:81:62:56:2b:8e:c6:d7:71:12:2e:
9d:74:5b:e0:b4:a8:9d:84:c6:2d:28:47:d7:e8:17:
fa:9a:d7:77:56:82:83:5f:58:99:1d:31:cf:31:61:
42:c5:95:b1:31:7e:50:dc:fb:9d:7a:12:61:fc:98:
f2:eb:f1:0a:d3:20:e8:ae:28:9d:9c:c0:3a:77:6e:
ec:58:20:57:d1:a5:b3:9e:17:77:76:23:e9:a0:50:
3b:2b:a2:7f:21:8a:9d:36:6e:ab:47:9b:9d:c0:0e:
a8:03:a9:1b:23:55:ff:df:de:50:78:bd:b7:c6:be:
b6:7f:4d:76:97:1e:1d:71:51:86:29:68:97:d6:47:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:61:E0:08:CE:4A:58:49:51:91:C8:AC:63:3E:2A:E2:43:B0:1E
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:4b:84:6a:eb:49:0e:21:0f:5a:76:8f:83:2e:21:e2:8b:
66:6e:52:35:1c:11:1d:a2:87:f2:9e:e1:bb:fe:84:4c:af:d1:
b7:e3:05:cf:ec:1c:91:14:a9:4e:41:3f:ec:2a:c6:bd:44:76:
95:38:73:3a:63:dd:9d:fb:7b:b4:af:e1:cf:a7:6c:ce:53:ee:
72:91:e9:c8:04:7a:b8:28:50:99:6b:af:c6:c5:08:2e:d4:06:
71:a8:ee:dd:45:98:1f:c5:3e:2f:84:ee:c1:bc:d4:4c:4a:77:
27:38:4f:11:8e:ea:7d:a4:0f:86:06:24:c1:54:a5:8f:c6:6f:
aa:e0:1c:4d:c2:b0:df:fe:c1:c7:04:4b:81:c5:c9:6b:da:21:
4b:20:57:39:e7:ce:70:ec:f9:6f:1a:1e:bd:44:df:22:78:0a:
73:82:c9:02:71:42:7f:34:b8:5d:e0:10:69:1d:c3:01:78:10:
9d:de:c5:e4:62:b8:ec:be:59:15:58:cb:b3:0f:b9:3e:9c:57:
40:9f:35:23:c5:7c:4a:72:b3:e3:4d:0a:2c:18:0c:71:44:df:
21:b4:44:c6:16:f9:16:74:87:56:84:73:0a:39:d6:46:ae:84:
ec:f3:22:04:d0:11:40:5f:b8:29:df:47:54:33:da:b3:fd:e6:
34:8f:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:53 2025 by rpki-client